Dominique Bolignano Daniel Le Métayer Claire Loiseaux Formal Methods in Practice: The Missing Links. A Perspective from the Security Area. 169-182 2000 conf/movep/2000 MOVEP http://link.springer.de/link/service/series/0558/bibs/2067/20670169.htm db/conf/movep/movep2000.html#BolignanoML00